Hi,
when when preparing ad (2008) for exchange 2013 installation, I get this error "length of the access control list exceed the allowed maximum"
after some searh I found this solution on http://support.microsoft.com/kb/973848/en-us
which consists on the following steps:
- Click Start, click Run, type ldp, and then click OK.
- In the LDP console, click the Connection menu, click Connect, type domain controller name, and then click OK.
- On the Connection menu, click Bind, type the credentials of the domain administrator, and then click OK.
- On the View menu, click Tree.
- In BaseDN drop-down list, select the appropriate domain context, such as "DC=Contoso,DC=com," and then click OK.
- In the tree view, under DC=<var><domainname></var>,DC=com, locate to the object "CN=Microsoft Exchange System objects,DC=<var><domainname></var>,DC=com".
- Right-click the object in step 6, click Advanced, select Security Descriptor, make sure that the SACL option and the "Text dump" option are
unchecked and then click OK.
This will open a new window with security descriptor details - In this security descriptor Window, click to select the DACL check box.
- In the middle pane of the Security descriptor Window, select and delete all the access control entries (ACEs) that have “\0ADEL:” in the Trustee column. Multiple ACEs can be selected and then click Delete ACE to delete them.
- Close the security descriptor as soon as you delete the corresponding ACE's
- Close the LDP console.
- Force Domain Controller replication.
- Rerun Exchange setup and it will install successfully
But I didn't find the object ""CN=Microsoft Exchange System objects" since I've removed it before the preparation!!!
Can anyone help please to solve this issue??
Thanks